Terraform Security Patterns

소개

This skill empowers Claude to architect and implement production-grade security measures for Terraform environments. It provides specialized guidance on managing sensitive data through HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault, while enforcing organizational standards using Policy as Code frameworks like OPA/Conftest and Sentinel. By integrating automated scanning tools like Checkov and tfsec, the skill ensures that infrastructure is audited for vulnerabilities and misconfigurations before deployment, maintaining a high security posture across all cloud providers.

주요 기능

• End-to-end encryption patterns for S3, RDS, and EBS resources
• Cross-cloud secrets management for Vault, AWS, and Azure
• Automated security scanning with Checkov and tfsec configurations
• Best practices for sensitive data protection and variable masking
• Policy as Code integration using OPA, Conftest, and Sentinel
• 1 GitHub stars

사용 사례

• Establishing zero-trust secrets management for production IaC
• Implementing automated compliance guardrails in CI/CD pipelines
• Remediating security vulnerabilities in existing Terraform configurations